$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft File: azpu8rvlhOJwDYYifvSaOc24Hc4.mft (raw, json) Hash identifier: H0mqNkd0YyyUDVKFGMDiqGGrN0zHutIVX4Hb+3Hk9fg= Subject key identifier: D6:CF:D3:F9:08:C5:7E:43:8C:D6:65:25:F3:4C:86:47:B8:23:81:2E Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE Certificate issuer: /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Certificate serial: 0204 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft Manifest number: 01F8 Signing time: Sun 19 May 2024 04:14:45 +0000 Manifest this update: Sun 19 May 2024 04:14:44 +0000 Manifest next update: Sun 26 May 2024 04:14:44 +0000 Files and hashes: 1: azpu8rvlhOJwDYYifvSaOc24Hc4.crl (hash: OGMbtzxdtcLRkBHQwF5ZHIl/ZU3dDMY6humXoDpLw98=) 2: E7D03568F89011ECB5F98148C4F9AE02.roa (hash: 7jiC+J2WuHYuNaOgqYif6Akt5mE2gB+KzzLpHJUfK94=) 3: 937AFB607E3611EEAD05495AC4F9AE02.roa (hash: hzDh8bxAy/ZSrgSI2u5U0YmRnv4aP73KPeoCoXjkXiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Validity Not Before: May 19 04:14:44 2024 GMT Not After : May 26 04:14:44 2024 GMT Subject: CN=66497cb5-58d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ee:b5:c2:7f:f2:91:a6:04:73:0a:bb:73:40: 18:14:fb:54:80:cc:a7:8d:03:23:ac:41:8e:34:53: e8:ed:f8:1e:b2:11:ea:4c:1c:b0:ff:f3:f8:24:04: ec:4c:f6:47:08:9e:53:41:4c:75:82:7e:8a:de:ca: 01:3d:fd:99:3a:8f:fb:ec:fd:11:09:3d:f2:45:38: 63:03:f2:02:14:d8:d0:06:65:06:53:3c:f0:a4:ea: 5f:f8:95:21:ea:6b:a8:32:48:67:80:13:66:ef:44: 62:fa:52:c4:52:b4:1a:59:25:be:ed:d0:1c:e0:7c: 82:f4:e8:0a:53:a1:a5:65:26:c9:45:67:53:1d:d3: 77:7b:32:db:03:f1:6e:c2:be:a5:37:19:63:bb:8a: b0:32:c2:6b:d2:34:78:ee:63:79:eb:da:2d:56:e5: 75:49:30:78:be:0e:a0:7f:3d:6a:91:e3:92:7f:6c: 02:77:94:06:0b:9d:36:9b:f9:0e:bd:ba:82:3f:bb: 2b:6c:b5:f5:76:9c:b6:be:04:54:5a:8b:40:41:ac: ac:0c:f7:c9:9e:37:98:1e:9c:53:54:88:a5:b0:1d: 71:b7:40:a5:7c:ff:4b:5a:5d:98:3d:73:00:71:ab: a9:c0:1f:e4:8e:f7:41:f9:91:75:f9:59:46:35:f2: 63:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CF:D3:F9:08:C5:7E:43:8C:D6:65:25:F3:4C:86:47:B8:23:81:2E X509v3 Authority Key Identifier: keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ee:43:1b:eb:34:58:e6:05:41:06:9f:b9:1b:30:94:4c:58: a9:97:2e:4d:8d:24:8c:ca:60:90:9a:82:12:42:66:ed:b0:59: 7f:88:6b:6d:cb:b5:9f:b6:82:a4:9b:88:a7:cf:a7:b4:c8:4b: e2:cf:08:0f:9e:b9:15:86:40:1f:fe:b2:89:99:fe:be:d0:da: 62:4a:b2:40:f1:fd:cc:59:6a:65:6d:92:c0:23:a3:f4:49:ec: a4:be:e4:8b:e7:85:8b:f6:0b:fb:fe:50:aa:ed:ff:a9:62:c1: 9d:61:4e:36:4e:40:5b:3c:1d:bf:f2:9b:2e:fe:36:51:63:8c: 14:af:f1:8e:b8:ae:d3:e0:c5:09:67:0a:c5:8f:f7:61:9a:e4: 18:45:5a:7c:87:b8:5b:e6:0a:64:6c:9a:e7:80:06:d0:dc:ae: f0:7a:b7:83:8e:79:8b:50:90:46:6c:5f:d6:bf:22:8a:69:fc: 41:c8:22:6c:5d:4c:e1:2b:a6:6b:7d:5e:6d:ba:f3:02:47:7c: 0b:f3:93:28:ae:55:3d:62:bf:0d:20:08:5d:1b:e0:3a:5f:c7: 72:05:96:0d:f3:f3:98:d7:fb:39:58:32:8b:28:d6:8e:04:08: a3:26:e3:76:4b:ad:c8:fd:57:c0:8c:1a:e5:19:9d:3e:39:7c: 33:b8:ba:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkEwMEExMTAvBgNVBAUTKDZCM0E2RUYyQkJFNTg0RTI3MDBEODYyMjdFRjQ5QTM5 Q0RCODFEQ0UwHhcNMjQwNTE5MDQxNDQ0WhcNMjQwNTI2MDQxNDQ0WjAYMRYwFAYD VQQDEw02NjQ5N2NiNS01OGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+61wn/ykaYEcwq7c0AYFPtUgMynjQMjrEGONFPo7fgeshHqTByw//P4JATs TPZHCJ5TQUx1gn6K3soBPf2ZOo/77P0RCT3yRThjA/ICFNjQBmUGUzzwpOpf+JUh 6muoMkhngBNm70Ri+lLEUrQaWSW+7dAc4HyC9OgKU6GlZSbJRWdTHdN3ezLbA/Fu wr6lNxlju4qwMsJr0jR47mN569otVuV1STB4vg6gfz1qkeOSf2wCd5QGC502m/kO vbqCP7srbLX1dpy2vgRUWotAQaysDPfJnjeYHpxTVIilsB1xt0ClfP9LWl2YPXMA caupwB/kjvdB+ZF1+VlGNfJj2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbP0/kI xX5DjNZlJfNMhke4I4EuMB8GA1UdIwQYMBaAFGs6bvK75YTicA2GIn70mjnNuB3O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAwQS8zQUE5NEIzNkY4 OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhPSndEWVlpZnZTYU9jMjRI YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F6cHU4cnZsaE9Kd0RZWWlmdlNhT2MyNEhjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTAwQS8zQUE5NEIzNkY4OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhP SndEWVlpZnZTYU9jMjRIYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe7kMb6zRY5gVBBp+5GzCUTFiply5NjSSMymCQmoISQmbtsFl/iGtt y7WftoKkm4inz6e0yEvizwgPnrkVhkAf/rKJmf6+0NpiSrJA8f3MWWplbZLAI6P0 SeykvuSL54WL9gv7/lCq7f+pYsGdYU42TkBbPB2/8psu/jZRY4wUr/GOuK7T4MUJ ZwrFj/dhmuQYRVp8h7hb5gpkbJrngAbQ3K7wereDjnmLUJBGbF/WvyKKafxByCJs XUzhK6ZrfV5tuvMCR3wL85MorlU9Yr8NIAhdG+A6X8dyBZYN8/OY1/s5WDKLKNaO BAijJuN2S63I/VfAjBrlGZ0+OXwzuLrk -----END CERTIFICATE-----Generated at Sun May 19 05:08:07 2024 by rpki-client on console-ams.rpki-client.org